solvent-agent 0.2.0__tar.gz → 0.2.2__tar.gz

{solvent_agent-0.2.0/solvent_agent.egg-info → solvent_agent-0.2.2}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: solvent-agent
-Version: 0.2.0
+Version: 0.2.2
 Summary: A self-funding analyst agent: earns on Stripe, fulfils with NVIDIA Nemotron, spends within guardrails.
 License: MIT
 Project-URL: Homepage, https://github.com/ianalloway/solvent-agent
@@ -602,7 +602,7 @@ With both keys set:
 | `SOLVENT_HOME` | Where runtime data and `.solvent` configuration (treasury DB, policies, reports, dashboard, logs) are stored. Defaults to the repo when run from a checkout, else `~/.solvent` |
 | `NVIDIA_API_KEY` | Live Nemotron inference (`nvapi-...`) |
 | `STRIPE_API_KEY` | Stripe test key (`sk_test_...`) |
-| `STRIPE_WEBHOOK_SECRET` | Optional webhook verification |
+| `STRIPE_WEBHOOK_SECRET` | Required to accept `/webhooks/stripe` events (signature is verified before anything is stored) |
 | `STRIPE_PAYMENT_POLL_TIMEOUT` | Seconds to wait for payment (default `120`) |
 | `STRIPE_PAYMENT_POLL_INTERVAL` | Poll interval in seconds (default `2`) |
 | `SOLVENT_FORCE_STRIPE_SIMULATE` | Force offline simulate mode even with a key |

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/README.md

@@ -561,7 +561,7 @@ With both keys set:
 | `SOLVENT_HOME` | Where runtime data and `.solvent` configuration (treasury DB, policies, reports, dashboard, logs) are stored. Defaults to the repo when run from a checkout, else `~/.solvent` |
 | `NVIDIA_API_KEY` | Live Nemotron inference (`nvapi-...`) |
 | `STRIPE_API_KEY` | Stripe test key (`sk_test_...`) |
-| `STRIPE_WEBHOOK_SECRET` | Optional webhook verification |
+| `STRIPE_WEBHOOK_SECRET` | Required to accept `/webhooks/stripe` events (signature is verified before anything is stored) |
 | `STRIPE_PAYMENT_POLL_TIMEOUT` | Seconds to wait for payment (default `120`) |
 | `STRIPE_PAYMENT_POLL_INTERVAL` | Poll interval in seconds (default `2`) |
 | `SOLVENT_FORCE_STRIPE_SIMULATE` | Force offline simulate mode even with a key |

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/__init__.py

@@ -1,3 +1,3 @@
 """SOLVENT — a self-funding analyst agent. See run_demo.py."""
 
-__version__ = "0.2.0"
+__version__ = "0.2.2"

solvent_agent-0.2.2/solvent/access.py

@@ -0,0 +1,128 @@
+"""Request-origin and abuse-limiting helpers for the HTTP server.
+
+Two small, framework-free pieces that ``server.py`` builds its gates on:
+
+* :func:`is_local_request` -- the "is this really the operator on this machine"
+  check behind the local-only routes.  Trusting the peer address alone is wrong
+  behind a reverse proxy (every proxied request arrives from 127.0.0.1), so a
+  request that carries proxy headers is never treated as local.
+* :class:`FailureLimiter` -- a tiny in-memory failed-attempt limiter used to slow
+  down guessing of single-use pairing tokens.
+"""
+
+from __future__ import annotations
+
+import ipaddress
+import os
+import threading
+import time
+from collections import deque
+from collections.abc import Mapping
+from typing import Any
+
+#: Environment variable that controls how "local" is decided.
+#:
+#: * ``auto`` (default): the peer address is loopback **and** the request carries
+#:   no proxy/forwarding header.
+#: * ``never``: nothing is local.  Local-only routes then need a delivery token
+#:   (or the dashboard token).  Use this when a reverse proxy fronts the server.
+#: * ``peer``: legacy behaviour -- trust the peer address only.  Only safe when
+#:   the server is *not* behind a proxy.
+LOCAL_ACCESS_ENV = "SOLVENT_LOCAL_ACCESS"
+
+#: Headers that a reverse proxy / CDN adds.  If any is present the request did not
+#: originate on this machine, whatever the peer address says.
+PROXY_HEADERS = (
+    "forwarded",
+    "x-forwarded-for",
+    "x-forwarded-host",
+    "x-forwarded-proto",
+    "x-forwarded-port",
+    "x-forwarded-server",
+    "x-real-ip",
+    "x-client-ip",
+    "x-cluster-client-ip",
+    "cf-connecting-ip",
+    "true-client-ip",
+    "via",
+)
+
+# "testclient" is the peer name Starlette's TestClient reports.
+_LOCAL_NAMES = frozenset({"localhost", "testclient"})
+
+
+def _is_loopback(host: str) -> bool:
+    if host.lower() in _LOCAL_NAMES:
+        return True
+    try:
+        ip = ipaddress.ip_address(host.split("%", 1)[0])
+    except ValueError:
+        return False
+    if isinstance(ip, ipaddress.IPv6Address) and ip.ipv4_mapped is not None:
+        ip = ip.ipv4_mapped
+    return ip.is_loopback
+
+
+def local_access_mode(env: Mapping[str, str] | None = None) -> str:
+    """The configured local-access mode: ``auto`` (default), ``never`` or ``peer``."""
+    raw = (env if env is not None else os.environ).get(LOCAL_ACCESS_ENV, "auto")
+    mode = raw.strip().lower()
+    return mode if mode in ("auto", "never", "peer") else "auto"
+
+
+def peer_host(request: Any) -> str:
+    """The peer (socket) address of a request, or ``""``."""
+    client = getattr(request, "client", None)
+    return str(getattr(client, "host", "") or "") if client else ""
+
+
+def has_proxy_headers(request: Any) -> bool:
+    headers = getattr(request, "headers", None) or {}
+    return any(name in headers for name in PROXY_HEADERS)
+
+
+def is_local_request(request: Any, env: Mapping[str, str] | None = None) -> bool:
+    """True only for a request that genuinely originates on this machine."""
+    if request is None:
+        return False
+    mode = local_access_mode(env)
+    if mode == "never":
+        return False
+    if not _is_loopback(peer_host(request)):
+        return False
+    if mode == "peer":
+        return True
+    return not has_proxy_headers(request)
+
+
+class FailureLimiter:
+    """Block a key after ``max_failures`` failures inside a sliding ``window`` (seconds)."""
+
+    def __init__(self, max_failures: int, window: float, max_keys: int = 10_000):
+        self.max_failures = max_failures
+        self.window = window
+        self.max_keys = max_keys
+        self._hits: dict[str, deque[float]] = {}
+        self._lock = threading.Lock()
+
+    def _prune(self, key: str, now: float) -> deque[float]:
+        hits = self._hits.setdefault(key, deque())
+        while hits and now - hits[0] > self.window:
+            hits.popleft()
+        if not hits:
+            self._hits.pop(key, None)
+        return hits
+
+    def blocked(self, key: str, now: float | None = None) -> bool:
+        now = time.monotonic() if now is None else now
+        with self._lock:
+            return len(self._prune(key, now)) >= self.max_failures
+
+    def record_failure(self, key: str, now: float | None = None) -> None:
+        now = time.monotonic() if now is None else now
+        with self._lock:
+            if key not in self._hits and len(self._hits) >= self.max_keys:
+                # Bound memory: drop the stalest key.
+                oldest = min(self._hits, key=lambda k: self._hits[k][-1] if self._hits[k] else 0)
+                self._hits.pop(oldest, None)
+            self._hits.setdefault(key, deque()).append(now)

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/agent.py

@@ -22,7 +22,7 @@ from collections.abc import Callable
 from .calibration import calibration_factor
 from .guardrails import Guardrails
 from .pricing import PricingPolicy
-from .stages import StageRunner, _job_id_of, validate_and_coerce_job
+from .stages import StageRunner, _job_id_of, coerce_job, screen_and_record
 from .stripe_client import StripeClient
 from .treasury import Treasury
 
@@ -79,10 +79,21 @@ class Solvent:
         return self._runner.advance_job(job_id)
 
     def enqueue_job(self, job: dict) -> dict:
-        """Validate and persist a job for async worker processing."""
-        validated, err = validate_and_coerce_job(job, self.t)
+        """Validate and persist a new job for async worker processing.
+
+        Invalid input is declined before anything is written. A valid job then
+        claims its id with an atomic insert, so a submission can never
+        overwrite or restart an existing job.
+        """
+        coerced, err = coerce_job(job)
+        if err:
+            return self._emit(stage="declined", job_id=_job_id_of(job, None), reason=err)
+        assert coerced is not None
+        if not self.t.insert_job(coerced["id"], "received"):
+            return {"stage": "declined", "job_id": coerced["id"], "reason": "job id already exists"}
+        validated, err = screen_and_record(coerced, self.t)
         if err:
-            return self._emit(stage="declined", job_id=_job_id_of(job, validated), reason=err)
+            return self._emit(stage="declined", job_id=coerced["id"], reason=err)
         assert validated is not None
         q = self._runner._stage_quote(validated)
         if q.get("stage") == "declined" or not q.get("accept"):

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/chat.py

@@ -11,6 +11,7 @@ import uuid
 from . import nemotron, tools
 from .agent import Solvent
 from .memory import SessionMemory
+from .money import dollars_to_cents
 from .pricing import quote
 from .security import InputValidationError, PromptInjectionError, sanitise_prompt_input
 from .treasury import fmt
@@ -145,7 +146,7 @@ def _merge_commission_slots(agent: Solvent, session_id: str, text: str) -> dict:
         pending.setdefault("topic", text.strip()[:200])
     m = _BUDGET_RE.search(text)
     if m:
-        pending["budget_cents"] = int(float(m.group(1)) * 100)
+        pending["budget_cents"] = dollars_to_cents(m.group(1))
     em = _EMAIL_RE.search(text)
     if em:
         pending["customer_email"] = em.group(0)

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/cli.py

@@ -29,6 +29,7 @@ from solvent.config import (
     load_config,
 )
 from solvent.jobs import SAMPLE_JOBS
+from solvent.money import dollars_to_cents
 from solvent.onboarding import run_wizard, should_skip_onboarding, wants_reconfigure
 from solvent.treasury import fmt
 
@@ -205,7 +206,7 @@ def run_interactive_mode(seed_cents: int = 10_000, fresh: bool = True):
                 continue
             try:
                 fund_amt = float(parts[1])
-                fund_cents = int(fund_amt * 100)
+                fund_cents = dollars_to_cents(fund_amt)
                 if fund_cents <= 0:
                     print(f"{C_RED}Fund amount must be positive.{C_RESET}\n")
                     continue
@@ -233,7 +234,7 @@ def run_interactive_mode(seed_cents: int = 10_000, fresh: bool = True):
 
         budget_str = input(f"{C_CYAN}Client Budget in USD (e.g. 50.00):{C_RESET} $").strip()
         try:
-            budget_cents = int(float(budget_str) * 100)
+            budget_cents = dollars_to_cents(budget_str)
             if budget_cents <= 0:
                 print(f"{C_RED}Budget must be greater than 0.{C_RESET}\n")
                 continue
@@ -341,7 +342,7 @@ def main():
     cfg = resolve_config(args)
     apply_config(cfg)
 
-    seed_cents = int(args.seed * 100)
+    seed_cents = dollars_to_cents(args.seed)
     fresh = not args.keep_balance
 
     if args.interactive:

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/dashboard.py

@@ -38,6 +38,8 @@ def _script_json(value: object) -> str:
         .replace("<", "\\u003c")
         .replace(">", "\\u003e")
         .replace("&", "\\u0026")
+        .replace("\u2028", "\\u2028")
+        .replace("\u2029", "\\u2029")
     )
 
 
@@ -1367,15 +1369,6 @@ def render(snapshot: dict, log: list[dict], *, live: bool = False) -> Path:
     let jobsData = {_script_json(jobs_data)};
     let currentOpenJobId = null;
 
-    function esc(value) {{
-      return String(value ?? "")
-        .replace(/&/g, "&amp;")
-        .replace(/</g, "&lt;")
-        .replace(/>/g, "&gt;")
-        .replace(/"/g, "&quot;")
-        .replace(/'/g, "&#39;");
-    }}
-
     function openBriefModal(jobId) {{
       document.getElementById("modal-title").innerText = "Research Brief Preview: " + jobId;
       const iframe = document.getElementById("brief-iframe");
@@ -1398,21 +1391,28 @@ def render(snapshot: dict, log: list[dict], *, live: bool = False) -> Path:
         return;
       }}
 
-      let html = "";
+      container.replaceChildren();
       jobIds.forEach(jobId => {{
         const job = jobsData[jobId] || {{}};
-        const title = job.title || `Research Brief (${{jobId}})`;
-        html += `
-          <div style="display:flex; justify-content:space-between; align-items:center; background:rgba(255,255,255,0.02); border:1px solid var(--color-border); padding:10px 14px; border-radius:10px; margin-bottom: 8px;">
-            <div style="display:flex; flex-direction:column; gap:2px; max-width:70%;">
-              <span style="font-size:11px; font-family:var(--font-mono); color:var(--color-text-muted);">${{esc(jobId)}}</span>
-              <span style="font-size:13px; font-weight:600; color:var(--color-text-primary); text-overflow:ellipsis; overflow:hidden; white-space:nowrap;">${{esc(title)}}</span>
-            </div>
-            <button class="btn btn-outline btn-sm" onclick="openBriefModal(${{esc(JSON.stringify(jobId))}})" style="padding:4px 8px; font-size:11px;">Preview</button>
-          </div>
-        `;
+        const row = document.createElement("div");
+        row.style.cssText = "display:flex; justify-content:space-between; align-items:center; background:rgba(255,255,255,0.02); border:1px solid var(--color-border); padding:10px 14px; border-radius:10px; margin-bottom: 8px;";
+        const labels = document.createElement("div");
+        labels.style.cssText = "display:flex; flex-direction:column; gap:2px; max-width:70%;";
+        const idEl = document.createElement("span");
+        idEl.style.cssText = "font-size:11px; font-family:var(--font-mono); color:var(--color-text-muted);";
+        idEl.textContent = jobId;
+        const titleEl = document.createElement("span");
+        titleEl.style.cssText = "font-size:13px; font-weight:600; color:var(--color-text-primary); text-overflow:ellipsis; overflow:hidden; white-space:nowrap;";
+        titleEl.textContent = job.title || `Research Brief (${{jobId}})`;
+        labels.append(idEl, titleEl);
+        const button = document.createElement("button");
+        button.className = "btn btn-outline btn-sm";
+        button.style.cssText = "padding:4px 8px; font-size:11px;";
+        button.textContent = "Preview";
+        button.addEventListener("click", () => openBriefModal(jobId));
+        row.append(labels, button);
+        container.appendChild(row);
       }});
-      container.innerHTML = html;
     }}
 
     // Auto-scroll terminal log to the bottom
@@ -1431,28 +1431,43 @@ def render(snapshot: dict, log: list[dict], *, live: bool = False) -> Path:
 
       document.getElementById("drawer-title").innerText = "Job Details: " + jobId;
 
-      let metaHTML = `
-        <div class="meta-row"><strong>Title:</strong> <span>${{esc(job.title || 'N/A')}}</span></div>
-        <div class="meta-row"><strong>Status:</strong> <span class="badge badge-${{esc(job.status)}}">${{esc(String(job.status).toUpperCase())}}</span></div>
-        <div class="meta-row"><strong>Client Budget:</strong> <span>${{formatCents(job.price)}}</span></div>
-        <div class="meta-row"><strong>Incurred COGS:</strong> <span>${{formatCents(getExpensesTotal(job.expenses))}}</span></div>
-        <div class="meta-row"><strong>Net P&L:</strong> <span class="${{job.pnl >= 0 ? 'green' : 'red'}}">${{job.pnl >= 0 ? '+' : ''}}${{formatCents(job.pnl)}}</span></div>
-        <div class="meta-row"><strong>Est. Margin:</strong> <span>${{esc(job.margin_pct)}}%</span></div>
-      `;
+      const meta = document.getElementById("drawer-metadata");
+      meta.replaceChildren();
+      const metaRow = (label, value, className) => {{
+        const row = document.createElement("div");
+        row.className = "meta-row";
+        const strong = document.createElement("strong");
+        strong.textContent = label;
+        const span = document.createElement("span");
+        if (className) span.className = className;
+        span.textContent = value;
+        row.append(strong, " ", span);
+        meta.appendChild(row);
+      }};
+      const status = String(job.status);
+      metaRow("Title:", job.title || "N/A");
+      metaRow("Status:", status.toUpperCase(), "badge badge-" + status.replace(/[^a-z_]/gi, ""));
+      metaRow("Client Budget:", formatCents(job.price));
+      metaRow("Incurred COGS:", formatCents(getExpensesTotal(job.expenses)));
+      metaRow("Net P&L:", (job.pnl >= 0 ? "+" : "") + formatCents(job.pnl), job.pnl >= 0 ? "green" : "red");
+      metaRow("Est. Margin:", String(job.margin_pct) + "%");
 
       if (job.expenses.length > 0) {{
-        metaHTML += `
-          <h4 style="margin-top: 16px; margin-bottom: 8px; font-size:12px; color:var(--color-text-muted)">ITEMIZED EXPENSES</h4>
-          <ul class="drawer-expenses-list">
-        `;
+        const heading = document.createElement("h4");
+        heading.style.cssText = "margin-top: 16px; margin-bottom: 8px; font-size:12px; color:var(--color-text-muted)";
+        heading.textContent = "ITEMIZED EXPENSES";
+        const list = document.createElement("ul");
+        list.className = "drawer-expenses-list";
         job.expenses.forEach(e => {{
-          metaHTML += `<li><strong>${{esc(e.vendor)}}:</strong> -${{formatCents(e.amount)}} (${{esc(e.memo)}})</li>`;
+          const item = document.createElement("li");
+          const vendor = document.createElement("strong");
+          vendor.textContent = String(e.vendor) + ":";
+          item.append(vendor, ` -${{formatCents(e.amount)}} (${{e.memo}})`);
+          list.appendChild(item);
         }});
-        metaHTML += '</ul>';
+        meta.append(heading, list);
       }}
 
-      document.getElementById("drawer-metadata").innerHTML = metaHTML;
-
       const hasBrief = Object.prototype.hasOwnProperty.call(briefs || {{}}, jobId);
       const reportText = hasBrief
         ? "_Brief generated. Use the hosted brief link with a delivery token to view full contents._"
@@ -1503,13 +1518,13 @@ def render(snapshot: dict, log: list[dict], *, live: bool = False) -> Path:
       html = html.replace(/\\*(.*?)\\*/g, '<em>$1</em>');
 
       // Double line breaks to paragraphs
-      const paragraphs = html.split(/\n\n+/);
+      const paragraphs = html.split(/\\n\\n+/);
       html = paragraphs.map(p => {{
         p = p.trim();
         if (!p) return '';
         if (p.startsWith('<h') || p.startsWith('<ul') || p.startsWith('<li')) return p;
-        return `<p>${{p.replace(/\n/g, '<br>')}}</p>`;
-      }}).join('\n');
+        return `<p>${{p.replace(/\\n/g, '<br>')}}</p>`;
+      }}).join("\\n");
 
       return html;
     }}

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/export.py

@@ -228,8 +228,44 @@ _TABLES = {
 }
 
 
+#: Free-text columns that can carry customer- or vendor-supplied strings. Only
+#: these are neutralised, so numeric columns stay numeric for the spreadsheet.
+_UNTRUSTED_TEXT_COLUMNS = {
+    "ledger": frozenset(
+        {"memo", "job_id", "vendor", "stripe_ref", "stripe_session_id", "stripe_link_id"}
+    ),
+    "jobs": frozenset(
+        {"id", "status", "topic", "customer_email", "current_stage", "error_reason", "deliverable_url"}
+    ),
+    "metrics": frozenset({"job_id", "decline_reason", "block_rule"}),
+    "customers": frozenset({"email"}),
+}
+
+_FORMULA_TRIGGERS = ("=", "+", "-", "@", "\t", "\r")
+_LEADING_NOISE = re.compile(r"^[\s\x00-\x1f\x7f\u200b-\u200f\u2060\ufeff]*")
+
+
+def neutralise_cell(value: Any) -> Any:
+    """Stop a spreadsheet from evaluating a text cell as a formula.
+
+    A string whose first significant character (after any leading whitespace
+    or control characters) is ``= + - @``, or that starts with a tab or
+    carriage return, is prefixed with a single quote. Non-strings pass through.
+    """
+    if not isinstance(value, str) or not value:
+        return value
+    significant = _LEADING_NOISE.sub("", value, count=1)
+    if value.startswith(_FORMULA_TRIGGERS) or significant.startswith(_FORMULA_TRIGGERS):
+        return "'" + value
+    return value
+
+
 def write_csv(data: dict[str, Any], out_dir: Path) -> list[Path]:
-    """Write one CSV per table; returns the files written."""
+    """Write one CSV per table; returns the files written.
+
+    Untrusted text columns are passed through `neutralise_cell` so a job topic
+    or memo like ``=HYPERLINK(...)`` is shown as text, not run as a formula.
+    """
     out_dir.mkdir(parents=True, exist_ok=True)
     written = []
     for table, columns in _TABLES.items():
@@ -237,8 +273,14 @@ def write_csv(data: dict[str, Any], out_dir: Path) -> list[Path]:
         with path.open("w", encoding="utf-8", newline="") as fh:
             writer = csv.DictWriter(fh, fieldnames=list(columns), extrasaction="ignore")
             writer.writeheader()
+            text_columns = _UNTRUSTED_TEXT_COLUMNS.get(table, frozenset())
             for row in data[table]:
-                writer.writerow(row)
+                writer.writerow(
+                    {
+                        key: neutralise_cell(value) if key in text_columns else value
+                        for key, value in row.items()
+                    }
+                )
         written.append(path)
     return written
 

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/finance.py

@@ -23,6 +23,7 @@ import sys
 from collections.abc import Iterable
 
 from .treasury import LedgerEntry, Treasury, fmt
+from .money import dollars_to_cents
 
 _PERIODS = ("day", "week", "month")
 
@@ -387,7 +388,7 @@ def main() -> None:
     )
     if "--reserve" in args:
         try:
-            reserve_cents = int(float(args[args.index("--reserve") + 1]) * 100)
+            reserve_cents = dollars_to_cents(args[args.index("--reserve") + 1])
         except (ValueError, IndexError):
             print(usage)
             sys.exit(1)

{solvent_agent-0.2.0 → solvent_agent-0.2.2}/solvent/gateway.py

@@ -10,6 +10,7 @@ from . import pairing
 from .agent import Solvent
 from .chat import format_job_notification, handle_message
 from .memory import SessionMemory
+from .money import dollars_to_cents
 from .rate_limit import RateLimiter
 from .treasury import fmt
 
@@ -37,6 +38,11 @@ def notify(channel: str, external_id: str, text: str) -> None:
             pass
 
 
+#: Commands that answer from local state without calling the model; only these
+#: skip the per-user rate limit. Everything else, /quote included, is counted.
+RATE_EXEMPT_COMMANDS = frozenset({"/help", "/status", "/jobs"})
+
+
 def _rate_ok(user_key: str) -> bool:
     allowed, _reason = _rate_limiter.check(user_key)
     return allowed
@@ -55,10 +61,16 @@ class Gateway:
         *,
         user_label: str | None = None,
     ) -> str:
+        user_key = f"{channel}:{external_id}"
+        if _rate_limiter.is_banned(user_key):
+            return "You are temporarily blocked from messaging this bot."
+
         session = self.memory.get_or_create(channel, external_id, user_label)
-        is_command = text.strip().startswith("/")
+        stripped = text.strip()
+        is_command = stripped.startswith("/")
+        command = stripped.split(maxsplit=1)[0].lower() if is_command else ""
 
-        if not is_command and not _rate_ok(f"{channel}:{external_id}"):
+        if command not in RATE_EXEMPT_COMMANDS and not _rate_ok(user_key):
             return "Rate limit exceeded. Please wait before sending more messages."
 
         if channel == "telegram" and not pairing.is_allowed(external_id, user_label):
@@ -82,7 +94,7 @@ class Gateway:
         cmd = parts[0].lower()
         arg = parts[1] if len(parts) > 1 else ""
 
-        if cmd == "/help":
+        if cmd in ("/help", "/start"):
             return (
                 "SOLVENT research business bot.\n"
                 "/status — treasury snapshot\n"
@@ -106,6 +118,13 @@ class Gateway:
                 f"{j['id']}: {j.get('status')} — {(j.get('topic') or '')[:40]}" for j in jobs
             )
         if cmd == "/pair" and arg.strip().lower() == "qr":
+            if channel == "telegram" and pairing.dm_policy() == "open":
+                # With an open DM policy any Telegram user reaches this command;
+                # minting a pairing token is an operator action.
+                return (
+                    "Pairing QR codes are not available over an open Telegram DM policy. "
+                    "Use /pair qr from the dashboard chat, or set SOLVENT_TELEGRAM_DM_POLICY=pairing."
+                )
             token = self.agent.t.create_openclaw_token(ttl=600)
             from . import qr as _qr
 
@@ -122,13 +141,14 @@ class Gateway:
                 port = 443
             return _qr.render_token(token, host=host, port=port)
 
-        if cmd == "/quote" and "|" in arg:
+        if cmd == "/quote":
+            if "|" not in arg:
+                return "Usage: /quote topic | 50.00"
             topic, budget_s = [x.strip() for x in arg.split("|", 1)]
             try:
-                cents = int(float(budget_s) * 100)
+                cents = dollars_to_cents(budget_s)
             except ValueError:
                 return "Usage: /quote topic | 50.00"
-            from .chat import handle_message
 
             prompt = f"Quote a brief on '{topic}' with budget_cents={cents}. Use quote_brief tool."
             return handle_message(
@@ -139,9 +159,7 @@ class Gateway:
                 channel=channel,
             )
 
-        return handle_message(
-            session["id"], text, agent=self.agent, memory=self.memory, channel=channel
-        )
+        return f"Unknown command {cmd[:32]}. Send /help for the list of commands."
 
     def on_job_event(self, event: dict) -> None:
         """Push job lifecycle updates to sessions watching a job."""

solvent_agent-0.2.2/solvent/money.py

@@ -0,0 +1,36 @@
+"""money.py — one shared dollars -> cents conversion.
+
+``int(dollars * 100)`` truncates binary-float error toward zero, so
+``int(19.99 * 100)`` is ``1998``, one cent short of what the user typed.
+Every place that turns a user-supplied dollar amount into integer cents should
+call :func:`dollars_to_cents` instead.
+"""
+
+from __future__ import annotations
+
+from decimal import ROUND_HALF_UP, Decimal, InvalidOperation
+
+
+def dollars_to_cents(amount: int | float | str | Decimal) -> int:
+    """Convert a dollar amount to integer cents, rounding half away from zero.
+
+    The value is read through its decimal string form (``Decimal(str(amount))``)
+    rather than its binary float value, so ``19.99`` is ``1999`` and ``0.29`` is
+    ``29``.  Sub-cent amounts round half up: ``1.005`` is ``101``.  Negative
+    amounts mirror positive ones (``-1.005`` is ``-101``).
+
+    Raises:
+        ValueError: if *amount* is not a finite number (``nan``, ``inf``,
+            garbage text, ``None``, a bool).  ``ValueError`` matches what
+            ``float()`` raised for bad input, so existing ``except ValueError``
+            handlers keep working.
+    """
+    if isinstance(amount, bool) or amount is None:
+        raise ValueError(f"not a dollar amount: {amount!r}")
+    try:
+        value = amount if isinstance(amount, Decimal) else Decimal(str(amount).strip())
+    except InvalidOperation:
+        raise ValueError(f"not a dollar amount: {amount!r}") from None
+    if not value.is_finite():
+        raise ValueError(f"not a finite dollar amount: {amount!r}")
+    return int((value * 100).quantize(Decimal(1), rounding=ROUND_HALF_UP))